Obligations due by this deadline
For all in-scope entities
- Art 15 — The ESAs shall submit the draft regulatory technical standards to the Commission by 17 January 2024.
- Art 18 — The ESAs shall submit the common draft regulatory technical standards to the Commission by 17 January 2024.
For financial services
- Art 16 — Submit draft regulatory technical standards to the Commission.
Checklist — what you need to have done
- Art 15: submit
What should already be in place — audit framing
17 January 2024 is 865 days behind us. The obligations on this page have been in force since then; treat any gap as an audit finding, not a planning question. The expected baseline under DORA:
- ICT risk-management framework review — should be done already
- digital operational resilience testing — should be done already
- third-party register population — should be done already
If any of these are missing, the right next step is a gap assessment plus a documented remediation plan — not a re-design of the underlying programme.
Related Fontvera pages
- dora article 9 financial entities
- dora obligations central securities depositories
- dora obligations financial services
- dora obligations ict services
Check your full compliance exposure with the 5-minute Fontvera diagnostic →